Generate xpack SSL certificates with longer expiry date

Elastic Stack Elasticsearch
#1

When we generate SSL certificates with elasticsearch-certutil, we get them with the expiry of 3 years
Is there a way that we can generate the certificates with longer expiry date such as 5 years or so.
Is it possible to mention the expiry while creating the certificates

#2

Hi @smiley_tamy

Per the docs here us the days parameter with certain restrictions.

--days <n>
Specifies an integer value that represents the number of days the generated certificates are valid. The default value is 1095. This parameter cannot be used with the csr or http parameters.

#3

Thank you for the quick reply :grinning: